Pulse — monitoring app365.fr

ShadowBroker

https://shadowbroker.app365.fr

Démarré 09/07/2026 14:00:15Terminé 09/07/2026 14:00:4933283 msStatut : PARTIALTrigger : schedule:cmph3vjhe0000q7za8x3o6j3g

Résumé

{
  "seo": {
    "ok": true,
    "lang": null,
    "score": 49,
    "title": null,
    "h1Count": 0,
    "finalUrl": "https://shadowbroker.app365.fr/",
    "imgTotal": 0,
    "robotsOk": false,
    "canonical": null,
    "sitemapOk": false,
    "ogComplete": false,
    "jsonLdCount": 0,
    "titleLength": 0,
    "imgWithoutAlt": 0,
    "descriptionLength": 0
  },
  "tls": {
    "ok": true,
    "host": "shadowbroker.app365.fr",
    "cipher": "TLS_AES_128_GCM_SHA256",
    "issuer": "E7",
    "subject": "shadowbroker.app365.fr",
    "validTo": "2026-08-19T20:35:43.000Z",
    "protocol": "TLSv1.3",
    "daysToExpiry": 41
  },
  "deps": {
    "ok": true,
    "detected": [
      "Caddy"
    ],
    "versionedCount": 0
  },
  "ports": {
    "ok": true,
    "host": "shadowbroker.app365.fr",
    "scanned": 30,
    "services": {
      "22": "ssh OpenSSH 9.2p1 Debian 2+deb12u10 (protocol 2.0)",
      "80": "http Caddy httpd",
      "443": "ssl/http Caddy httpd"
    },
    "openPorts": [
      22,
      80,
      443
    ]
  },
  "uptime": {
    "ok": true,
    "method": "HEAD",
    "finalUrl": "https://shadowbroker.app365.fr/",
    "httpStatus": 502,
    "redirected": true,
    "responseTimeMs": 3011
  },
  "headers": {
    "ok": true,
    "score": 28,
    "server": "Caddy",
    "headers": {
      "Referrer-Policy": null,
      "X-Frame-Options": null,
      "Permissions-Policy": null,
      "X-Content-Type-Options": null,
      "Content-Security-Policy": null,
      "Strict-Transport-Security": null
    },
    "httpStatus": 502
  }
}

Findings (19)

UPTIME

CRITICALErreur serveur 502UPTIME_5XX
HEAD https://shadowbroker.app365.fr → 502 Bad Gateway
evidence
```
{
  "method": "HEAD",
  "status": 502,
  "finalUrl": "https://shadowbroker.app365.fr/"
}
```
MEDIUMRéponse lente (3011 ms)UPTIME_SLOW
Seuil d'alerte : 3000 ms
evidence
```
{
  "elapsedMs": 3011
}
```

HEADERS

HIGHHSTS absentSEC_HEADER_HSTS

Sans HSTS, un visiteur peut être redirigé vers HTTP.

evidence

{
  "value": null,
  "header": "Strict-Transport-Security",
  "recommend": "max-age=31536000; includeSubDomains; preload"
}

MEDIUMContent-Security-Policy absentSEC_HEADER_CSP
Une CSP réduit le risque d'XSS. À définir au moins avec default-src.
evidence
```
{
  "value": null,
  "header": "Content-Security-Policy",
  "recommend": "Définir une CSP restrictive"
}
```
MEDIUMX-Frame-Options absentSEC_HEADER_X_FRAME
Risque de clickjacking. Mettre DENY ou SAMEORIGIN.
evidence
```
{
  "value": null,
  "header": "X-Frame-Options",
  "recommend": "DENY ou SAMEORIGIN"
}
```

LOWX-Content-Type-Options absentSEC_HEADER_X_CTO

Recommandé : nosniff.

evidence

{
  "value": null,
  "header": "X-Content-Type-Options",
  "recommend": "nosniff"
}

LOWReferrer-Policy absentSEC_HEADER_REFERRER

Recommandé : strict-origin-when-cross-origin.

evidence

{
  "value": null,
  "header": "Referrer-Policy",
  "recommend": "strict-origin-when-cross-origin"
}

INFOPermissions-Policy absentSEC_HEADER_PERMISSIONS
Optionnel mais recommandé pour restreindre les API navigateur.
evidence
```
{
  "value": null,
  "header": "Permissions-Policy",
  "recommend": "geolocation=(), microphone=(), camera=()"
}
```

SEO

HIGHBalise <title> manquanteSEO_MISSING_TITLE
MEDIUMMeta description manquanteSEO_MISSING_DESCRIPTION
MEDIUMAucun <h1> sur la pageSEO_NO_H1
MEDIUMMeta viewport absentSEO_NO_VIEWPORT
Recommandé : <meta name="viewport" content="width=device-width, initial-scale=1">
LOWrobots.txt absent ou inaccessibleSEO_NO_ROBOTS
Statut 502 sur https://shadowbroker.app365.fr/robots.txt
LOWBalise canonical absenteSEO_NO_CANONICAL
LOWOpen Graph incomplet (manquant : og:title, og:description, og:image)SEO_INCOMPLETE_OG
Améliore les previews sur réseaux sociaux.
evidence
```
{
  "missing": [
    "og:title",
    "og:description",
    "og:image"
  ]
}
```
LOWsitemap.xml absentSEO_NO_SITEMAP
Pas de sitemap à https://shadowbroker.app365.fr/sitemap.xml et aucune référence dans robots.txt.
LOWAttribut <html lang> absentSEO_NO_LANG
Recommandé pour l'accessibilité et le SEO international.

PORTS

HIGHPort 22/ssh ouvert publiquementPORT_OPEN_REMOTE
Accès à distance exposé. À limiter par firewall ou désactiver si non utilisé.
evidence
```
{
  "port": 22,
  "service": "ssh OpenSSH 9.2p1 Debian 2+deb12u10 (protocol 2.0)",
  "category": "REMOTE"
}
```

DEPS

INFOFramework divulgué via Server: CaddyDEPS_FRAMEWORK_DISCLOSURE
evidence
```
{
  "value": "Caddy",
  "header": "server"
}
```